@dewtech/dare-cli 3.0.0 → 3.1.0

package/templates/stacks/mcp-rust/src/lib.rs

@@ -0,0 +1,6 @@
+//! Public crate surface — re-exported for tests and the bin.
+pub mod cli;
+pub mod prompts;
+pub mod server;
+pub mod tools;
+pub mod transports;

package/templates/stacks/mcp-rust/src/main.rs.tera

@@ -0,0 +1,30 @@
+//! {{ projectName }} — MCP server entrypoint.
+use clap::Parser;
+use tracing_subscriber::EnvFilter;
+
+use {{ crateName }}::cli::{Cli, Transport};
+use {{ crateName }}::tools;
+use {{ crateName }}::transports;
+
+#[tokio::main]
+async fn main() -> anyhow::Result<()> {
+    let cli = Cli::parse();
+
+    // --json --list-tools short-circuits before starting any transport (M-03).
+    if cli.list_tools && cli.json {
+        let inventory = tools::inventory_json();
+        println!("{}", serde_json::to_string_pretty(&inventory)?);
+        return Ok(());
+    }
+
+    tracing_subscriber::fmt()
+        .with_env_filter(EnvFilter::from_default_env())
+        .with_writer(std::io::stderr)
+        .init();
+
+    match cli.transport {
+        Transport::Stdio => transports::stdio::run().await,
+        Transport::Sse => transports::sse::run(&cli.host, cli.port).await,
+        Transport::Http => transports::http::run(&cli.host, cli.port).await,
+    }
+}

package/templates/stacks/mcp-rust/src/prompts/mod.rs

@@ -0,0 +1 @@
+pub mod summarize;

package/templates/stacks/mcp-rust/src/prompts/summarize.rs

@@ -0,0 +1,5 @@
+//! Summarize prompt — returns the templated user-message body.
+
+pub fn summarize(text: &str) -> String {
+    format!("Summarize the following text in 1-2 sentences.\n\n{text}")
+}

package/templates/stacks/mcp-rust/src/server.rs.tera

@@ -0,0 +1,38 @@
+//! MCP service definition — wires tools + prompts via the rmcp SDK.
+//!
+//! NOTE: the rmcp API is pre-1.0; the exact handler-registration surface may
+//! shift between releases. The structure below keeps the SDK glue thin and the
+//! business logic in `tools::` / `prompts::` (pure, unit-tested) so a breaking
+//! rmcp change only touches this file.
+use rmcp::{
+    handler::server::ServerHandler,
+    model::{ServerCapabilities, ServerInfo},
+};
+
+use crate::tools;
+
+#[derive(Clone, Default)]
+pub struct DareMcpService;
+
+impl ServerHandler for DareMcpService {
+    fn get_info(&self) -> ServerInfo {
+        ServerInfo {
+            instructions: Some(
+                "DARE-shaped MCP server ({{ projectName }}). Tools: echo. Prompts: summarize."
+                    .into(),
+            ),
+            capabilities: ServerCapabilities::builder()
+                .enable_tools()
+                .enable_prompts()
+                .build(),
+            ..Default::default()
+        }
+    }
+}
+
+/// Convenience constructor used by every transport.
+pub fn build_service() -> DareMcpService {
+    // Touch the tool inventory so a missing tool module is a compile error.
+    let _ = tools::inventory_json();
+    DareMcpService
+}

package/templates/stacks/mcp-rust/src/tools/echo.rs

@@ -0,0 +1,18 @@
+//! Echo tool — pure function, unit-tested independently of the SDK.
+
+/// Returns its input verbatim.
+///
+/// # Errors
+/// Returns `Err` when `text` is empty.
+pub fn echo(text: &str) -> Result<String, EchoError> {
+    if text.is_empty() {
+        return Err(EchoError::Empty);
+    }
+    Ok(text.to_string())
+}
+
+#[derive(Debug, thiserror::Error, PartialEq, Eq)]
+pub enum EchoError {
+    #[error("text must be a non-empty string")]
+    Empty,
+}

package/templates/stacks/mcp-rust/src/tools/mod.rs

@@ -0,0 +1,22 @@
+pub mod echo;
+
+use serde_json::{json, Value};
+
+/// Machine-readable tool inventory for `--json --list-tools` (M-03).
+pub fn inventory_json() -> Value {
+    json!({
+        "tools": [
+            {
+                "name": "echo",
+                "description": "Returns its input. Canonical smoke test for an MCP server.",
+                "inputSchema": {
+                    "type": "object",
+                    "required": ["text"],
+                    "properties": {
+                        "text": { "type": "string", "minLength": 1 }
+                    }
+                }
+            }
+        ]
+    })
+}

package/templates/stacks/mcp-rust/src/transports/http.rs

@@ -0,0 +1,27 @@
+//! Streamable HTTP transport.
+//!
+//! rmcp exposes a streamable-http server behind a feature flag in recent
+//! releases (pre-1.0). This wrapper centralizes the bind logic; swap the route
+//! bodies for rmcp's StreamableHttpService integration for your version.
+use std::net::SocketAddr;
+
+use crate::server::build_service;
+
+pub async fn run(host: &str, port: u16) -> anyhow::Result<()> {
+    let addr: SocketAddr = format!("{host}:{port}").parse()?;
+    tracing::info!("mcp/http listening on {addr}");
+
+    let _service = build_service();
+
+    let app = axum::Router::new()
+        .route(
+            "/messages",
+            axum::routing::post(|| async { "MCP streamable-http endpoint — wire rmcp here" })
+                .get(|| async { "MCP streamable-http endpoint — wire rmcp here" }),
+        )
+        .layer(tower_http::cors::CorsLayer::permissive());
+
+    let listener = tokio::net::TcpListener::bind(addr).await?;
+    axum::serve(listener, app).await?;
+    Ok(())
+}

package/templates/stacks/mcp-rust/src/transports/mod.rs

@@ -0,0 +1,3 @@
+pub mod http;
+pub mod sse;
+pub mod stdio;

package/templates/stacks/mcp-rust/src/transports/sse.rs

@@ -0,0 +1,33 @@
+//! SSE-over-HTTP transport.
+//!
+//! rmcp exposes an SSE server behind the `transport-sse-server` feature in
+//! recent releases; the surface is pre-1.0. This wrapper keeps the bind logic
+//! in one place. If the SDK feature name or constructor changes, only this
+//! file needs editing.
+use std::net::SocketAddr;
+
+use crate::server::build_service;
+
+pub async fn run(host: &str, port: u16) -> anyhow::Result<()> {
+    let addr: SocketAddr = format!("{host}:{port}").parse()?;
+    tracing::info!("mcp/sse listening on {addr}");
+
+    // Build the service so capabilities are validated even if the concrete
+    // SSE wiring below is adjusted for your rmcp version.
+    let _service = build_service();
+
+    // Minimal axum app that documents where the SSE endpoints live. Replace
+    // the route bodies with rmcp's SSE server integration for your version
+    // (e.g. rmcp::transport::sse_server::SseServer::serve(addr)).
+    let app = axum::Router::new()
+        .route("/sse", axum::routing::get(|| async { "MCP SSE endpoint — wire rmcp SseServer here" }))
+        .route(
+            "/messages",
+            axum::routing::post(|| async { "MCP message endpoint — wire rmcp SseServer here" }),
+        )
+        .layer(tower_http::cors::CorsLayer::permissive());
+
+    let listener = tokio::net::TcpListener::bind(addr).await?;
+    axum::serve(listener, app).await?;
+    Ok(())
+}

package/templates/stacks/mcp-rust/src/transports/stdio.rs

@@ -0,0 +1,14 @@
+//! stdio transport — default for local agents.
+//!
+//! Uses rmcp's stdio server. The exact serve call may differ across rmcp
+//! versions; adjust here if `cargo build` fails after an SDK bump.
+use rmcp::ServiceExt;
+
+use crate::server::build_service;
+
+pub async fn run() -> anyhow::Result<()> {
+    let service = build_service();
+    let server = service.serve((tokio::io::stdin(), tokio::io::stdout())).await?;
+    server.waiting().await?;
+    Ok(())
+}

package/templates/stacks/mcp-rust/tests/echo_test.rs.tera

@@ -0,0 +1,27 @@
+//! Smoke tests — pure tools/prompts, no SDK or transport needed.
+use {{ crateName }}::prompts::summarize::summarize;
+use {{ crateName }}::tools::echo::{echo, EchoError};
+
+#[test]
+fn echo_returns_input() {
+    assert_eq!(echo("hello").unwrap(), "hello");
+}
+
+#[test]
+fn echo_rejects_empty() {
+    assert_eq!(echo(""), Err(EchoError::Empty));
+}
+
+#[test]
+fn summarize_includes_input() {
+    let out = summarize("long text here");
+    assert!(out.contains("long text here"));
+    assert!(out.contains("Summarize"));
+}
+
+#[test]
+fn tool_inventory_lists_echo() {
+    let inv = {{ crateName }}::tools::inventory_json();
+    let tools = inv["tools"].as_array().expect("tools array");
+    assert!(tools.iter().any(|t| t["name"] == "echo"));
+}

package/templates/stacks/node-nestjs/.dare/skills.yml

@@ -0,0 +1,11 @@
+version: 1
+skills:
+  - id: skill-nestjs-api
+    source: skill-nestjs-api
+    description: NestJS Layered Design + Prisma + JWT + Swagger
+  - id: dare-ax
+    source: dare-ax
+    description: Agent eXperience invariants (llms.txt, OpenAPI, --json, rate limit)
+  - id: dare-layered-design
+    source: dare-layered-design
+    description: Handler → Service → Repository → Model 4-layer architecture

package/templates/stacks/node-nestjs/.env.example

@@ -0,0 +1,21 @@
+# Application
+PORT=3000
+LOG_LEVEL=info
+
+# Database
+DATABASE_URL=postgresql://user:pass@localhost:5432/myapi
+
+# JWT auth
+JWT_SECRET=replace-me-in-prod
+JWT_EXPIRES_IN=15m
+
+# Password hashing
+BCRYPT_COST=12
+
+# Throttler (rate limit)
+RATE_LIMIT_RPM=60
+RATE_LIMIT_TTL=60
+
+# LLM provider (optional)
+# LLM_PROVIDER=dummy
+# OPENAI_API_KEY=

package/templates/stacks/node-nestjs/.github/workflows/dare-ci.yml

@@ -0,0 +1,54 @@
+name: DARE CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  audit:
+    name: Audit dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm audit --audit-level=high
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm lint
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm prisma generate
+      - run: pnpm test

package/templates/stacks/node-nestjs/README.md.hbs

@@ -0,0 +1,35 @@
+# {{projectName}}
+
+DARE-shaped NestJS API. Layered Design (Handler → Service → Repository → Model).
+
+## Setup
+
+```bash
+cp .env.example .env
+docker compose up -d postgres
+pnpm install
+pnpm prisma migrate dev --name init
+pnpm prisma db seed
+pnpm start:dev
+```
+
+## Endpoints
+
+- `POST /auth/login` — exchange email/password for JWT
+- `GET /auth/me` — current user (Bearer JWT)
+- `GET /users` — list users (paginated)
+- `POST /users` — create user (admin only)
+- `GET /openapi.json` — OpenAPI 3.1 surface
+- `GET /api` — Swagger UI
+
+## Commands
+
+- `pnpm start:dev` — dev with watch
+- `pnpm test` — run tests
+- `pnpm lint` — ESLint
+- `pnpm audit` — dependency audit (fails on HIGH+)
+
+## DARE Method
+
+This project was scaffolded with the [DARE Method](https://github.com/dewtech-technologies/dare-method).
+See `.dare/skills.yml` for installed skills, `llms.txt` for agent context.

package/templates/stacks/node-nestjs/gitignore

@@ -0,0 +1,7 @@
+node_modules
+dist
+coverage
+.env
+.env.local
+*.log
+.DS_Store

package/templates/stacks/node-nestjs/llms.txt.hbs

@@ -0,0 +1,47 @@
+# {{projectName}}
+
+DARE-shaped NestJS 10 API. Layered Design: Handler → Service → Repository → Model.
+
+## Setup
+
+```bash
+cp .env.example .env
+docker compose up -d postgres
+pnpm install
+pnpm prisma migrate dev --name init
+pnpm prisma db seed
+pnpm start:dev
+```
+
+## Commands
+
+- `pnpm start:dev` — dev server with watch (port 3000)
+- `pnpm test` — vitest run
+- `pnpm lint` — eslint
+- `pnpm audit` — pnpm audit --audit-level=high
+- `pnpm prisma migrate dev` — apply DB migrations
+
+## Endpoints
+
+| Method | Path | Auth | Description |
+|---|---|---|---|
+| POST | `/auth/login` | none | Exchange email+password for JWT |
+| GET | `/auth/me` | Bearer | Current user info |
+| GET | `/users` | Bearer | List users (query: page, limit) |
+| POST | `/users` | Bearer (admin) | Create user |
+| GET | `/openapi.json` | none | OpenAPI 3.1 document |
+| GET | `/api` | none | Swagger UI |
+
+## Layered Design
+
+- `src/auth/`, `src/users/` — feature modules
+- Each module has: controller (HTTP), service (logic), repository (DB), dto (validation)
+- Prisma is encapsulated behind repositories; controllers and services never see Prisma directly
+
+## Env vars
+
+See `.env.example`. Required: `DATABASE_URL`, `JWT_SECRET`.
+
+## DARE skills
+
+See `.dare/skills.yml`.

package/templates/stacks/node-nestjs/nest-cli.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json.schemastore.org/nest-cli",
+  "collection": "@nestjs/schematics",
+  "sourceRoot": "src",
+  "compilerOptions": {
+    "plugins": [
+      {
+        "name": "@nestjs/swagger",
+        "options": {
+          "introspectComments": true,
+          "classValidatorShim": true
+        }
+      }
+    ]
+  }
+}

package/templates/stacks/node-nestjs/openapi.json.hbs

@@ -0,0 +1,75 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "{{projectName}}",
+    "version": "0.1.0",
+    "description": "DARE-shaped NestJS API"
+  },
+  "paths": {
+    "/auth/login": {
+      "post": {
+        "summary": "Exchange email+password for JWT",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["email", "password"],
+                "properties": {
+                  "email": { "type": "string", "format": "email" },
+                  "password": { "type": "string", "minLength": 8 }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "JWT issued",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "accessToken": { "type": "string" },
+                    "expiresIn": { "type": "integer" }
+                  }
+                }
+              }
+            }
+          },
+          "401": { "description": "Invalid credentials" }
+        }
+      }
+    },
+    "/auth/me": {
+      "get": {
+        "summary": "Current user",
+        "security": [{ "bearer": [] }],
+        "responses": { "200": { "description": "User info" }, "401": { "description": "Unauthorized" } }
+      }
+    },
+    "/users": {
+      "get": {
+        "summary": "List users",
+        "security": [{ "bearer": [] }],
+        "parameters": [
+          { "name": "page", "in": "query", "schema": { "type": "integer", "minimum": 1, "default": 1 } },
+          { "name": "limit", "in": "query", "schema": { "type": "integer", "minimum": 1, "maximum": 100, "default": 20 } }
+        ],
+        "responses": { "200": { "description": "Page of users" } }
+      },
+      "post": {
+        "summary": "Create user (admin)",
+        "security": [{ "bearer": [] }],
+        "responses": { "201": { "description": "Created" }, "403": { "description": "Forbidden" } }
+      }
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "bearer": { "type": "http", "scheme": "bearer", "bearerFormat": "JWT" }
+    }
+  }
+}

package/templates/stacks/node-nestjs/package.json.hbs

@@ -0,0 +1,57 @@
+{
+  "name": "{{projectName}}",
+  "version": "0.1.0",
+  "private": true,
+  "description": "DARE-shaped NestJS API",
+  "scripts": {
+    "build": "nest build",
+    "start": "nest start",
+    "start:dev": "nest start --watch",
+    "start:prod": "node dist/main",
+    "test": "vitest run",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "lint": "eslint src --ext .ts",
+    "audit": "pnpm audit --audit-level=high"
+  },
+  "dependencies": {
+    "@nestjs/common": "^10.3.0",
+    "@nestjs/config": "^3.2.0",
+    "@nestjs/core": "^10.3.0",
+    "@nestjs/jwt": "^10.2.0",
+    "@nestjs/passport": "^10.0.3",
+    "@nestjs/platform-express": "^10.3.0",
+    "@nestjs/swagger": "^7.3.0",
+    "@nestjs/throttler": "^6.0.0",
+    "@prisma/client": "^5.14.0",
+    "bcrypt": "^5.1.1",
+    "class-transformer": "^0.5.1",
+    "class-validator": "^0.14.1",
+    "nestjs-pino": "^4.0.0",
+    "passport": "^0.7.0",
+    "passport-jwt": "^4.0.1",
+    "pino-http": "^9.0.0",
+    "pino-pretty": "^11.0.0",
+    "reflect-metadata": "^0.2.0",
+    "rxjs": "^7.8.0"
+  },
+  "devDependencies": {
+    "@nestjs/cli": "^10.3.2",
+    "@nestjs/schematics": "^10.1.1",
+    "@nestjs/testing": "^10.3.0",
+    "@types/bcrypt": "^5.0.0",
+    "@types/express": "^4.17.0",
+    "@types/node": "^20.11.0",
+    "@types/passport-jwt": "^4.0.1",
+    "@typescript-eslint/eslint-plugin": "^7.0.0",
+    "@typescript-eslint/parser": "^7.0.0",
+    "eslint": "^8.57.0",
+    "prisma": "^5.14.0",
+    "ts-node": "^10.9.2",
+    "tsx": "^4.16.0",
+    "typescript": "^5.4.5",
+    "vitest": "^1.6.0"
+  },
+  "prisma": {
+    "seed": "tsx prisma/seed.ts"
+  }
+}

package/templates/stacks/node-nestjs/prisma/schema.prisma

@@ -0,0 +1,25 @@
+// SPDX-License-Identifier: MIT
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+
+model User {
+  id        String   @id @default(uuid())
+  email     String   @unique
+  password  String
+  role      Role     @default(USER)
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  @@index([email])
+}
+
+enum Role {
+  USER
+  ADMIN
+}

package/templates/stacks/node-nestjs/prisma/seed.ts.hbs

@@ -0,0 +1,25 @@
+import { PrismaClient } from '@prisma/client';
+import * as bcrypt from 'bcrypt';
+
+const prisma = new PrismaClient();
+
+async function main(): Promise<void> {
+  const cost = Number(process.env.BCRYPT_COST ?? 12);
+  await prisma.user.upsert({
+    where: { email: 'admin@{{projectName}}.local' },
+    update: {},
+    create: {
+      email: 'admin@{{projectName}}.local',
+      password: await bcrypt.hash('Admin0Pass', cost),
+      role: 'ADMIN',
+    },
+  });
+  console.log('[seed] admin user ready');
+}
+
+main()
+  .catch((err) => {
+    console.error(err);
+    process.exit(1);
+  })
+  .finally(() => prisma.$disconnect());

package/templates/stacks/node-nestjs/src/app.module.ts

@@ -0,0 +1,39 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule } from '@nestjs/config';
+import { ThrottlerGuard, ThrottlerModule } from '@nestjs/throttler';
+import { APP_GUARD, APP_INTERCEPTOR } from '@nestjs/core';
+import { LoggerModule } from 'nestjs-pino';
+import { AuthModule } from './auth/auth.module.js';
+import { UsersModule } from './users/users.module.js';
+import { PrismaModule } from './prisma/prisma.module.js';
+import { JsonResponseInterceptor } from './common/interceptors/json-response.interceptor.js';
+
+@Module({
+  imports: [
+    ConfigModule.forRoot({ isGlobal: true }),
+    LoggerModule.forRoot({
+      pinoHttp: {
+        level: process.env.LOG_LEVEL ?? 'info',
+        transport:
+          process.env.NODE_ENV !== 'production'
+            ? { target: 'pino-pretty' }
+            : undefined,
+      },
+    }),
+    // Rate limit — knobs in env.
+    ThrottlerModule.forRoot([
+      {
+        ttl: Number(process.env.RATE_LIMIT_TTL ?? 60) * 1000,
+        limit: Number(process.env.RATE_LIMIT_RPM ?? 60),
+      },
+    ]),
+    PrismaModule,
+    AuthModule,
+    UsersModule,
+  ],
+  providers: [
+    { provide: APP_GUARD, useClass: ThrottlerGuard },
+    { provide: APP_INTERCEPTOR, useClass: JsonResponseInterceptor },
+  ],
+})
+export class AppModule {}